WordPress Dropshix plugin <= 4.0.11 - Arbitrary Product Import vulnerability

Arbitrary Product Import vulnerability found in WordPress Dropshix plugin versions = 4.0.11. Solution Update the WordPress Dropshix plugin to the latest available version at least 4.0.14...

Dropshix <= 4.0.11 - Arbitrary Product Import

Due to lack of authorisation and CSRF checks in the AJAX function xoxImportItem...